Lucene search
+L

1885 matches found

CNNVD
CNNVD
added 2024/07/31 12:00 a.m.6 views

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS7.3AI score0.00619EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/31 12:00 a.m.11 views

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 individual developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS7.3AI score0.00578EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/31 12:00 a.m.7 views

PT-2024-38235 · Sourcecodester · Sourcecodester Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A critical issue affects the Login component, specifically the file "/admin/ajax.php?action=login", where manipulation of the username argument leads to sql...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/07/31 12:00 a.m.8 views

PT-2024-38252 · Sourcecodester · Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage block.php. The manipulation of the id argument leads to SQL injection...

8.8CVSS8.1AI score0.00619EPSS
SaveExploits1References8
OSV
OSV
added 2024/07/16 11:15 p.m.9 views

CVE-2024-21188

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: Chatbot. Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

6.1CVSS7.3AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/16 11:15 p.m.27 views

CVE-2024-21188

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: Chatbot. Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

6.1CVSS0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/16 10:40 p.m.85 views

CVE-2024-21188

CVE-2024-21188 affects Oracle Financial Services Revenue Management and Billing (Chatbot) with affected versions 6.0.0.0.0–6.1.0.0.0. The issue arises from insufficient input validation in the Chatbot component, enabling a remote attacker to modify or read data via HTTP, with attacks requiring us...

6.1CVSS5.8AI score0.00264EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/11 2:33 a.m.4 views

Malicious code in sap-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03dc685dfe15fdb078beb410b7703d57e92c5b9b53aa1403bc8f6a8225feaf3d The OpenSSF Package Analysis project identified 'sap-billing' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/07/11 2:33 a.m.9 views

MAL-2024-7618 Malicious code in sap-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03dc685dfe15fdb078beb410b7703d57e92c5b9b53aa1403bc8f6a8225feaf3d The OpenSSF Package Analysis project identified 'sap-billing' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/07/09 8:15 p.m.8 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS6.1AI score0.00543EPSS
SaveExploits1References1
NVD
NVD
added 2024/07/09 8:15 p.m.35 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS0.00543EPSS
SaveExploits1References1
CVE
CVE
added 2024/07/09 12:00 a.m.67 views

CVE-2024-37872

Affected software: Itsourcecode Billing System, version 1.0. Vulnerability: SQL injection in process.php that lets remote attackers execute arbitrary SQL commands via the username parameter. Impact / scope (as stated): Remote SQL execution with high likelihood of data compromise; no availability ...

8.1CVSS8.9AI score0.00543EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/07/09 12:00 a.m.10 views

Billing System security breach

Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS8.6AI score0.00543EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/07/09 12:00 a.m.19 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.8AI score0.00543EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/09 12:00 a.m.39 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

0.00543EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/13 2:15 p.m.7 views

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

9.8CVSS6.1AI score0.00732EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/13 2:15 p.m.25 views

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

9.8CVSS0.00732EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/06/13 12:00 a.m.34 views

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

0.00732EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.8 views

PT-2024-27783 · Unknown · Itsourcecode Billing System

Name of the Vulnerable Software and Affected Versions: itsourcecode Billing System version 1.0 Description: A SQL Injection issue allows a local attacker to execute arbitrary code in process.php via the username parameter. Recommendations: For itsourcecode Billing System version 1.0, consider...

9.8CVSS9AI score0.00732EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/13 12:00 a.m.52 views

CVE-2024-37849

A SQL injection vulnerability affects itsourcecode Billing System 1.0, enabling a local attacker to execute arbitrary code in process.php via the username parameter. Affected: itsourcecode Billing System 1.0, component process.php (username). Impact: high (arbitrary code execution) per CVSS 3.1 m...

9.8CVSS8.1AI score0.00732EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder